Resources for the Check Point Community, by the Check Point Community.

Tim Hall has done it again! He has just released the 2nd edition of "Max Power".Rather than get into details here, I urge you to check out this announcement post. It's a massive upgrade, and well worth checking out. -E

If this is your first visit, be sure to
check out the FAQ by clicking the
link above. You may have to register
before you can post: click the register link above to proceed. To start viewing messages,
select the forum that you want to visit from the selection below.

Upgrade from R70 to R80.10

My customer have Check Point UTM-1 37x with R70 image OS.
Now they purchase new Check Point 5100 and NGSM-410.
They already upgrade export from R70.
How if I want to restore or import from R70 upgrade export file to R80.10?

Re: Upgrade from R70 to R80.10

Hi Zimmie,

The client already upgrade export in their R70 environment. And they just give me the file from upgrade export proceeded.
And now I want to make R80.10 VM environment, and want to upgrade import the file this R80.10.

How can I do that?

Thanks,

Ary Kustirin

Originally Posted by Bob_Zimmerman

Typically, you should download the export tools for the version you're moving to, put them on the old system, and use them to generate the export. You then bring it over to the new system.

This export does not contain any of the OS-level configuration, only configuration made through SmartDashboard (and related tools).

Re: Upgrade from R70 to R80.10

You will have to build at least a SMS in R75.40 to import the export file, as you cannot do it in one step, so you have to go back to the customer and give them the R75.40 export tools and do the export again. From there you can do the export with the upgrade tools from R80.10 and then import into R80.10.
How to do that is described completely in the R80.10 Installation and Upgrade manual.

Re: Upgrade from R70 to R80.10

Hi msjouw,

Many thanks for your information.
I already made R70 standalone installation in VM. And I already put the export file from the customer. I made upgrade import with success in this virtual environment. I can open the policy with R70 smart dashboard.

Do you suggest, I have to put the R75.40 migration tools to the R70 VM, and then do the export again?
After I made export with R75.40 migration tools in the R70 VM, is the export file can be just import in R80.10 environment?
I also already made R80.10 VM, but only for Security Management Server.
I think the export file from R70 still build standalone, with gateway and management still integration.

Thanks and regards,

Ary Kustirin

Originally Posted by msjouw

You will have to build at least a SMS in R75.40 to import the export file, as you cannot do it in one step, so you have to go back to the customer and give them the R75.40 export tools and do the export again. From there you can do the export with the upgrade tools from R80.10 and then import into R80.10.
How to do that is described completely in the R80.10 Installation and Upgrade manual.

Re: Upgrade from R70 to R80.10

Hi Msjouw,

I already make R75.40 VM, and I take out R75.40 export tools.
I move the R75.40 export tools to the R70 VM.
In the R70 VM, I make upgrade export with the R75.40 export tools.
But there are error when I make upgrade export. The error message says ;

Migrating from the current management version is not supported. For information on what platforms are supported for upgrade please refer ti the release notes.
Execution finished with errors. See log file...

I can not export R70 with R75.40 export tools.
Maybe you have any suggestion for that?

By the way, the R70 export file that I got from customer, has built by standalone system. I mean, in the R70 export files has include gateway and management configuration information.
I need to make this separated, so I just want to management configuration included (distributed system). Because, in the next R80.10, I just want to import management configuration information, like network objects, rule, and policy.

Thanks and regards,

Ary Kustirin

Originally Posted by msjouw

Ok you have a R70 SMS, you need to:

create a R75.40 SMS VM as well

then first export the R70 with the R75.40 export tools

move the export file to the R75.40 VM and import the file

make sure all is working by checking with Dashboard (R75.40)

now get the latest R80.10 (march this year) and put them on the R75.40 machine and create a new export with those tools.

Add the new licenses with SmartUpdate, and remove the old NGX licenses

Build a new R80.10 VM

Use R80.10 upgrade tools on the R75.40 VM to generate a new export

Import the configuration you just exported into the R80.10 VM

Really, you can do step 2 almost anywhere in the process. I would do it early because it's easy and it saves you a little time with subsequent VM builds. All you should need to do for it is to uncheck "Firewall" and related settings in the object's config in SmartDashboard, remove the topology, and save.